@decaf-ts/integrations 0.1.1

package/lib/esm/keycloak/services/KeycloakRealmService.js

@@ -0,0 +1,161 @@
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+import { ClientBasedService } from "@decaf-ts/core";
+import Axios from "axios";
+import * as https from "node:https";
+export class KeycloakRealmService extends ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createRealm", true)).for(this.createRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        await this.request("POST", `/admin/realms`, adminAccessToken, { realm: realmName, enabled: true, ...payload }, 201, {}, ...ctxArgs);
+    }
+    async updateRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "updateRealm", true)).for(this.updateRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        const currentRealm = await this.fetchRealm(realmName, adminAccessToken, ...ctxArgs);
+        await this.request("PUT", `/admin/realms/${realmName}`, adminAccessToken, { ...currentRealm, ...payload, realm: realmName }, 204, {}, ...ctxArgs);
+    }
+    async deleteRealm(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "deleteRealm", true)).for(this.deleteRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        await this.request("DELETE", `/admin/realms/${realmName}`, adminAccessToken, undefined, 204, {}, ...ctxArgs);
+    }
+    async addRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "addRealm", true)).for(this.addRealm);
+        await this.createRealm(realmName, payload, ...ctxArgs);
+    }
+    async editRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "editRealm", true)).for(this.editRealm);
+        await this.updateRealm(realmName, payload, ...ctxArgs);
+    }
+    async removeRealm(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "removeRealm", true)).for(this.removeRealm);
+        await this.deleteRealm(realmName, ...ctxArgs);
+    }
+    async getRealm(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getRealm", true)).for(this.getRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        return this.fetchRealm(realmName, adminAccessToken, ...ctxArgs);
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        this.logCtx(args, this.getAccessToken);
+        const response = await this.client.request({
+            method: "POST",
+            url: `${this.config.protocol}://${this.config.host}/realms/${keycloakUser.realm}/protocol/openid-connect/token`,
+            data: new URLSearchParams({
+                client_id: keycloakUser.apiClientId,
+                username: keycloakUser.username,
+                password: keycloakUser.password,
+                grant_type: "password",
+            }).toString(),
+            headers: {
+                "content-type": "application/x-www-form-urlencoded",
+            },
+        });
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    async fetchRealm(realmName, accessToken, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.fetchRealm);
+        const response = await this.request("GET", `/admin/realms/${realmName}`, accessToken, undefined, 200, {}, ...ctxArgs);
+        return (this.parseJsonResponse(response.data) ?? {});
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode) {
+        const status = response.status;
+        const message = `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new ConflictError(message);
+        }
+        if (status === 400) {
+            throw new BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new NotFoundError(message);
+        }
+        throw new InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        return new InternalError(message);
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=KeycloakRealmService.js.map

package/lib/esm/keycloak/services/KeycloakRealmService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakRealmService.js","sourceRoot":"","sources":["../../../../src/keycloak/services/KeycloakRealmService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAMpD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAQpC,MAAM,OAAO,oBAAqB,SAAQ,kBAGzC;IACC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAwB,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,OAAiD,EACjD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAC7C,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAChD,IAAI,CAAC,MAAM,CAAC,YAAa,EACzB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAChB,MAAM,EACN,eAAe,EACf,gBAAgB,EAChB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,EAC/C,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,OAAqC,EACrC,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAC7C,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAChD,IAAI,CAAC,MAAM,CAAC,YAAa,EACzB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CACxC,SAAS,EACT,gBAAgB,EAChB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAChB,KAAK,EACL,iBAAiB,SAAS,EAAE,EAC5B,gBAAgB,EAChB,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EACjD,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAC7C,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAChD,IAAI,CAAC,MAAM,CAAC,YAAa,EACzB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,EAAE,EAC5B,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,OAAiD,EACjD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAC1C,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,OAAqC,EACrC,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAC3C,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAC7C,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAC1C,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAChD,IAAI,CAAC,MAAM,CAAC,YAAa,EACzB,GAAG,OAAO,CACX,CAAC;QACF,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,CAAC;IAClE,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QAClD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAC9C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,MAA2B;QAC9C,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,YAA0B,EAC1B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,YAAY,CAAC,KAAK,gCAAgC;YAC/G,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,YAAY,CAAC,WAAW;gBACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,UAAU,EAAE,UAAU;aACvB,CAAC,CAAC,QAAQ,EAAE;YACb,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CACjC,QAAQ,CAAC,IAAI,CACd,CAAC;QACF,IAAI,IAAI,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QACjD,MAAM,IAAI,eAAe,CACvB,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,SAAiB,EACjB,WAAmB,EACnB,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,iBAAiB,SAAS,EAAE,EAC5B,WAAW,EACX,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,OAAO,CACL,IAAI,CAAC,iBAAiB,CAA8B,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CACzE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAyC,EACzC,IAAY,EACZ,WAA+B,EAC/B,OAAgB,EAChB,WAAmB,EACnB,OAA+B,EAC/B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EACF,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACtD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACnD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,QAAa,EAAE,WAAmB;QAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAgB,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC/F,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,UAAU,CAAC,KAAY;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,iBAAiB,CAAI,IAAa;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF"}

package/lib/esm/keycloak/services/KeycloakRoleService.js

@@ -0,0 +1,208 @@
+import { BadRequestError, ConflictError, InternalError, NotFoundError, } from "@decaf-ts/db-decorators";
+import { ClientBasedService } from "@decaf-ts/core";
+import Axios from "axios";
+import * as https from "node:https";
+export class KeycloakRoleService extends ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createClientRoles(keycloakSetupConfig, roleConfigs, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createClientRoles", true)).for(this.createClientRoles);
+        const roles = roleConfigs ?? keycloakSetupConfig.client.roles ?? [];
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        for (const role of roles) {
+            await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients/${keycloakSetupConfig.client.clientUUID}/roles`, realmAccessToken, {
+                name: role.roleName,
+                description: role.description ?? `Auto-created role ${role.roleName}`,
+                composite: false,
+                clientRole: true,
+            }, 201, {}, ...ctxArgs);
+        }
+    }
+    async getRealmRoles(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getRealmRoles", true)).for(this.getRealmRoles);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const response = await this.request("GET", `/admin/realms/${realmName}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        return this.parseJsonResponse(response.data) ?? [];
+    }
+    async getClientRoles(realmName, clientUUID, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getClientRoles", true)).for(this.getClientRoles);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const response = await this.request("GET", `/admin/realms/${realmName}/clients/${clientUUID}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        return this.parseJsonResponse(response.data) ?? [];
+    }
+    async grantRealmRolesToUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "grantRealmRolesToUser", true)).for(this.grantRealmRolesToUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        await this.assignRolesToUser(`/admin/realms/${realmName}/roles`, `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, roleNames, adminAccessToken, ...ctxArgs);
+    }
+    async grantClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "grantClientRolesToUser", true)).for(this.grantClientRolesToUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        await this.assignRolesToUser(`/admin/realms/${realmName}/clients/${clientUUID}/roles`, `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, roleNames, adminAccessToken, ...ctxArgs);
+    }
+    async revokeRealmRolesFromUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "revokeRealmRolesFromUser", true)).for(this.revokeRealmRolesFromUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const rolesResponse = await this.request("GET", `/admin/realms/${realmName}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(rolesResponse.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, selectedRoles, 204, {}, ...ctxArgs);
+    }
+    async replaceRealmRolesForUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "replaceRealmRolesForUser", true)).for(this.replaceRealmRolesForUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const currentRolesResponse = await this.request("GET", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const currentRoles = this.parseJsonResponse(currentRolesResponse.data) ?? [];
+        if (currentRoles.length > 0) {
+            await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, currentRoles, 204, {}, ...ctxArgs);
+        }
+        await this.grantRealmRolesToUser(realmName, userUUID, roleNames, ...ctxArgs);
+    }
+    async revokeClientRolesFromUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "revokeClientRolesFromUser", true)).for(this.revokeClientRolesFromUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const rolesResponse = await this.request("GET", `/admin/realms/${realmName}/clients/${clientUUID}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(rolesResponse.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, selectedRoles, 204, {}, ...ctxArgs);
+    }
+    async replaceClientRolesForUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "replaceClientRolesForUser", true)).for(this.replaceClientRolesForUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const currentRolesResponse = await this.request("GET", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const currentRoles = this.parseJsonResponse(currentRolesResponse.data) ?? [];
+        if (currentRoles.length > 0) {
+            await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, currentRoles, 204, {}, ...ctxArgs);
+        }
+        await this.grantClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...ctxArgs);
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getAdminAccessToken(...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAdminAccessToken);
+        return this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+    }
+    async getRealmAccessToken(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getRealmAccessToken);
+        return this.getAccessToken(keycloakSetupConfig.realmApiUser, ...ctxArgs);
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    async assignRolesToUser(rolesUrl, setRolesUrl, roleNames, accessToken, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "assignRolesToUser", true)).for(this.assignRolesToUser);
+        const response = await this.request("GET", rolesUrl, accessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(response.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        if (selectedRoles.length === 0) {
+            throw new NotFoundError(`No roles matched ${roleNames.join(", ")}`);
+        }
+        const promises = selectedRoles.map((role) => this.request("POST", setRolesUrl, accessToken, [role], 204, {}, ...ctxArgs));
+        await Promise.all(promises);
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode, errorMsg) {
+        const status = response.status;
+        const message = errorMsg
+            ? `${errorMsg}: Expected ${successCode}, received ${response.status}: ${response.statusText}.`
+            : `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new ConflictError(message);
+        }
+        if (status === 400) {
+            throw new BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new NotFoundError(message);
+        }
+        throw new InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new NotFoundError(message);
+        }
+        return new InternalError(message);
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=KeycloakRoleService.js.map

package/lib/esm/keycloak/services/KeycloakRoleService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakRoleService.js","sourceRoot":"","sources":["../../../../src/keycloak/services/KeycloakRoleService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAMpD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,MAAM,OAAO,mBAAoB,SAAQ,kBAGxC;IACC,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAwB,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,mBAAwC,EACxC,WAAmD,EACnD,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CACnD,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,WAAW,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,mBAAmB,EACnB,GAAG,OAAO,CACX,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAChB,MAAM,EACN,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,YAAY,mBAAmB,CAAC,MAAM,CAAC,UAAU,QAAQ,EACjH,gBAAgB,EAChB;gBACE,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,qBAAqB,IAAI,CAAC,QAAQ,EAAE;gBACrE,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI;aACjB,EACD,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAC/C,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,iBAAiB,SAAS,QAAQ,EAClC,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,OAAO,IAAI,CAAC,iBAAiB,CAAQ,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,SAAiB,EACjB,UAAkB,EAClB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAChD,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EACxD,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,OAAO,IAAI,CAAC,iBAAiB,CAAQ,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,SAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,IAAI,CAAC,CACvD,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAC1B,iBAAiB,SAAS,QAAQ,EAClC,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,SAAS,EACT,gBAAgB,EAChB,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,CACxD,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAC1B,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EACxD,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,SAAS,EACT,gBAAgB,EAChB,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,SAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAC1D,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CACtC,KAAK,EACL,iBAAiB,SAAS,QAAQ,EAClC,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAQ,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,gBAAgB,EAChB,aAAa,EACb,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,SAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAC1D,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7C,KAAK,EACL,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,YAAY,GAChB,IAAI,CAAC,iBAAiB,CAAQ,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAClE,gBAAgB,EAChB,YAAY,EACZ,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,qBAAqB,CAC9B,SAAS,EACT,QAAQ,EACR,SAAS,EACT,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAC3D,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CACtC,KAAK,EACL,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EACxD,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAQ,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,gBAAgB,EAChB,aAAa,EACb,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAC3D,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7C,KAAK,EACL,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,gBAAgB,EAChB,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,YAAY,GAChB,IAAI,CAAC,iBAAiB,CAAQ,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAClF,gBAAgB,EAChB,YAAY,EACZ,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,sBAAsB,CAC/B,SAAS,EACT,UAAU,EACV,QAAQ,EACR,SAAS,EACT,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QAClD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAC9C,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,MAA2B;QAC9C,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAa,EAAE,GAAG,OAAO,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,mBAAwC,EACxC,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAa,EAAE,GAAG,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,YAA0B,EAC1B,GAAG,IAAyB;QAE5B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,MAAM,EACN,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAC7D,SAAS,EACT,IAAI,eAAe,CAAC;YAClB,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC,QAAQ,EAAE,EACb,GAAG,EACH,EAAE,cAAc,EAAE,mCAAmC,EAAE,EACvD,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CACjC,QAAQ,CAAC,IAAI,CACd,CAAC;QACF,IAAI,IAAI,EAAE,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QACjD,MAAM,IAAI,eAAe,CACvB,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,QAAgB,EAChB,WAAmB,EACnB,SAAmB,EACnB,WAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CACnD,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,QAAQ,EACR,WAAW,EACX,SAAS,EACT,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAQ,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,aAAa,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,QAAQ,GAAoB,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3D,IAAI,CAAC,OAAO,CACV,MAAM,EACN,WAAW,EACX,WAAW,EACX,CAAC,IAAI,CAAC,EACN,GAAG,EACH,EAAE,EACF,GAAG,OAAO,CACX,CACF,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAyC,EACzC,IAAY,EACZ,WAA+B,EAC/B,OAAgB,EAChB,WAAmB,EACnB,OAA+B,EAC/B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EACF,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC/B,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACtD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACR;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACnD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,kBAAkB,CACxB,QAAa,EACb,WAAmB,EACnB,QAAiB;QAEjB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAgB,CAAC;QACzC,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,GAAG,QAAQ,cAAc,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;YAC9F,CAAC,CAAC,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACnF,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAES,UAAU,CAAC,KAAY;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7G,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAEO,iBAAiB,CAAI,IAAa;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF"}

package/lib/esm/keycloak/services/KeycloakService.js

@@ -0,0 +1,180 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { description } from "@decaf-ts/decoration";
+import { ClientBasedService, service, } from "@decaf-ts/core";
+import { NotFoundError } from "@decaf-ts/db-decorators";
+import Axios from "axios";
+import * as https from "node:https";
+import { KeycloakRealmService } from "./KeycloakRealmService.js";
+import { KeycloakUserService } from "./KeycloakUserService.js";
+import { KeycloakRoleService } from "./KeycloakRoleService.js";
+import { KeycloakClientService } from "./KeycloakClientService.js";
+import { KeycloakIdentityProviderService } from "./KeycloakIdentityProviderService.js";
+import { KeycloakAuthService } from "./KeycloakAuthService.js";
+let KeycloakService = class KeycloakService extends ClientBasedService {
+    constructor() {
+        super();
+    }
+    async initialize(...args) {
+        const { log, ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        log.debug(`Binding inner services...`);
+        service()(KeycloakRealmService);
+        service()(KeycloakUserService);
+        service()(KeycloakRoleService);
+        service()(KeycloakClientService);
+        service()(KeycloakIdentityProviderService);
+        service()(KeycloakAuthService);
+        log.debug(`Initializing inner services...`);
+        this.realmService = new KeycloakRealmService();
+        await this.realmService.initialize(config, ...ctxArgs);
+        this.userService = new KeycloakUserService();
+        await this.userService.initialize(config, ...ctxArgs);
+        this.roleService = new KeycloakRoleService();
+        await this.roleService.initialize(config, ...ctxArgs);
+        this.clientService = new KeycloakClientService();
+        await this.clientService.initialize(config, ...ctxArgs);
+        this.identityProviderService = new KeycloakIdentityProviderService();
+        await this.identityProviderService.initialize(config, ...ctxArgs);
+        this.authService = new KeycloakAuthService();
+        await this.authService.initialize(config, ...ctxArgs);
+        const client = this.createHttpClient(config);
+        this._client = client;
+        log.debug(`Keycloak Service initialized with config: ${JSON.stringify(config)}`);
+        return { config, client };
+    }
+    async setupKeycloak(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "setupKeycloak", true)).for(this.setupKeycloak);
+        const adminApiUserUUID = await this.userService.addUserToRealm(keycloakSetupConfig.adminApiUser, {}, ...ctxArgs);
+        keycloakSetupConfig.adminApiUser.usernameUUID = adminApiUserUUID;
+        await this.roleService.grantRealmRolesToUser(keycloakSetupConfig.adminApiUser.realm, adminApiUserUUID, ["admin"], ...ctxArgs);
+        return keycloakSetupConfig;
+    }
+    async addRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "addRealm", true)).for(this.addRealm);
+        await this.realmService.addRealm(realmName, payload, ...ctxArgs);
+    }
+    async editRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "editRealm", true)).for(this.editRealm);
+        await this.realmService.editRealm(realmName, payload, ...ctxArgs);
+    }
+    async removeRealm(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "removeRealm", true)).for(this.removeRealm);
+        await this.realmService.removeRealm(realmName, ...ctxArgs);
+    }
+    async addUserToRealm(keycloakUser, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "addUserToRealm", true)).for(this.addUserToRealm);
+        return this.userService.addUserToRealm(keycloakUser, payload, ...ctxArgs);
+    }
+    async editUser(realmName, userUUID, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "editUser", true)).for(this.editUser);
+        await this.userService.editUser(realmName, userUUID, payload, ...ctxArgs);
+    }
+    async removeUserFromRealm(realmName, userUUID, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "removeUserFromRealm", true)).for(this.removeUserFromRealm);
+        await this.userService.removeUserFromRealm(realmName, userUUID, ...ctxArgs);
+    }
+    async addRealmRolesToUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "addRealmRolesToUser", true)).for(this.addRealmRolesToUser);
+        await this.roleService.grantRealmRolesToUser(realmName, userUUID, roleNames, ...ctxArgs);
+    }
+    async addClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "addClientRolesToUser", true)).for(this.addClientRolesToUser);
+        await this.roleService.grantClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...ctxArgs);
+    }
+    async deleteAdminApiUser(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "deleteAdminApiUser", true)).for(this.deleteAdminApiUser);
+        const rootAccessToken = await this.authService.getAccessToken(keycloakSetupConfig.rootApiUser, ...ctxArgs);
+        await this.userService.deleteUser(rootAccessToken, keycloakSetupConfig.adminApiUser, ...ctxArgs);
+    }
+    async setupOrganization(config, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "setupOrganization", true)).for(this.setupOrganization);
+        const adminAccessToken = await this.authService.getAccessToken(config.adminApiUser, ...ctxArgs);
+        await this.realmService.createRealm(config.realmApiUser.realm, config.realmConfig ?? {}, ...ctxArgs);
+        const realmUserUUID = await this.userService.createRealmUser(config.realmApiUser, {}, ...ctxArgs);
+        config.realmApiUser.usernameUUID = realmUserUUID;
+        const realmManagementUUID = await this.clientService.getClientUUID(adminAccessToken, config.realmApiUser.realm, "realm-management", ...ctxArgs);
+        await this.roleService.assignRolesToUser(`/admin/realms/${config.realmApiUser.realm}/clients/${realmManagementUUID}/roles`, `/admin/realms/${config.realmApiUser.realm}/users/${realmUserUUID}/role-mappings/clients/${realmManagementUUID}`, ["manage-clients", "manage-identity-providers"], adminAccessToken, ...ctxArgs);
+        const clientUUID = await this.clientService.createClient(config, undefined, ...ctxArgs);
+        config.client.clientUUID = clientUUID;
+        await this.updateClientScopesRolesMappers(config.realmApiUser, ...ctxArgs);
+        return config;
+    }
+    async setupOrganizationSSO(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "setupOrganizationSSO", true)).for(this.setupOrganizationSSO);
+        await this.clientService.createClientRoles(keycloakSetupConfig, undefined, ...ctxArgs);
+        if (keycloakSetupConfig.identityProvider) {
+            await this.identityProviderService.createIdentityProvider(keycloakSetupConfig, undefined, ...ctxArgs);
+            await this.identityProviderService.createIdentityProviderMappers(keycloakSetupConfig, undefined, ...ctxArgs);
+        }
+    }
+    async deleteOrganization(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "deleteOrganization", true)).for(this.deleteOrganization);
+        await this.realmService.removeRealm(realmName, ...ctxArgs);
+    }
+    createHttpClient(config) {
+        return Axios.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: !["development", "local"].includes(config.id),
+            }),
+        });
+    }
+    async updateClientScopesRolesMappers(keycloakUser, ...args) {
+        this.logCtx(args, this.updateClientScopesRolesMappers);
+        const client = this.createHttpClient(this.config);
+        const realmAccessToken = await this.authService.getAccessToken(keycloakUser, ...args);
+        const rolesResponse = await client.request({
+            method: "GET",
+            url: `${this.config.protocol}://${this.config.host}/admin/realms/${keycloakUser.realm}/client-scopes`,
+            headers: {
+                Authorization: `Bearer ${realmAccessToken}`,
+            },
+            validateStatus: () => true,
+        });
+        const clientScopes = this.parseJsonResponse(rolesResponse.data) ?? [];
+        const rolesScope = clientScopes.find((scope) => scope.name === "roles");
+        const clientRolesMapper = rolesScope?.protocolMappers?.find((mapper) => mapper.name === "client roles");
+        if (!rolesScope || !clientRolesMapper) {
+            throw new NotFoundError("Unable to find client roles mapper");
+        }
+        clientRolesMapper.config["id.token.claim"] = "true";
+        await client.request({
+            method: "PUT",
+            url: `${this.config.protocol}://${this.config.host}/admin/realms/${keycloakUser.realm}/client-scopes/${rolesScope.id}/protocol-mappers/models/${clientRolesMapper.id}`,
+            data: JSON.stringify(clientRolesMapper),
+            headers: {
+                Authorization: `Bearer ${realmAccessToken}`,
+                "Content-Type": "application/json",
+            },
+            validateStatus: () => true,
+        });
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+};
+KeycloakService = __decorate([
+    description("Orchestrates Keycloak realm/user/client provisioning across the inner Keycloak services"),
+    __metadata("design:paramtypes", [])
+], KeycloakService);
+export { KeycloakService };
+//# sourceMappingURL=KeycloakService.js.map

package/lib/esm/keycloak/services/KeycloakService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakService.js","sourceRoot":"","sources":["../../../../src/keycloak/services/KeycloakService.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EACL,kBAAkB,EAGlB,OAAO,GACR,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,OAAO,KAAwB,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,oBAAoB,EAAE,kCAA+B;AAC9D,OAAO,EAAE,mBAAmB,EAAE,iCAA8B;AAC5D,OAAO,EAAE,mBAAmB,EAAE,iCAA8B;AAC5D,OAAO,EAAE,qBAAqB,EAAE,mCAAgC;AAChE,OAAO,EAAE,+BAA+B,EAAE,6CAA0C;AACpF,OAAO,EAAE,mBAAmB,EAAE,iCAA8B;AAGrD,IAAM,eAAe,GAArB,MAAM,eAAgB,SAAQ,kBAGpC;IAaC;QACE,KAAK,EAAE,CAAC;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CACd,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CACvB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAC5C,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAwB,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QAEtB,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAC/B,OAAO,EAAE,CAAC,qBAAqB,CAAC,CAAC;QACjC,OAAO,EAAE,CAAC,+BAA+B,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAE/B,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC/C,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACjD,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,uBAAuB,GAAG,IAAI,+BAA+B,EAAE,CAAC;QACrE,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,GAAG,CAAC,KAAK,CACP,6CAA6C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CACtE,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,mBAAwC,EACxC,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAC/C,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE1B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAC5D,mBAAmB,CAAC,YAAa,EACjC,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,mBAAmB,CAAC,YAAa,CAAC,YAAY,GAAG,gBAAgB,CAAC;QAClE,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAC1C,mBAAmB,CAAC,YAAa,CAAC,KAAK,EACvC,gBAAgB,EAChB,CAAC,OAAO,CAAC,EACT,GAAG,OAAO,CACX,CAAC;QACF,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,OAAY,EACZ,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAC1C,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,SAAS,CACb,SAAiB,EACjB,OAAY,EACZ,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAC3C,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAC7C,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,YAA0B,EAC1B,OAAY,EACZ,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAChD,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,QAAgB,EAChB,OAAY,EACZ,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAC1C,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,QAAgB,EAChB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,CACrD,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,CACrD,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,MAAM,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAC1C,SAAS,EACT,QAAQ,EACR,SAAS,EACT,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,SAAiB,EACjB,UAAkB,EAClB,QAAgB,EAChB,SAAmB,EACnB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,CACtD,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAC3C,SAAS,EACT,UAAU,EACV,QAAQ,EACR,SAAS,EACT,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,mBAAwC,EACxC,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,CACpD,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAC3D,mBAAmB,CAAC,WAAY,EAChC,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAC/B,eAAe,EACf,mBAAmB,CAAC,YAAa,EACjC,GAAG,OAAO,CACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,MAA2B,EAC3B,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CACnD,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE9B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAC5D,MAAM,CAAC,YAAa,EACpB,GAAG,OAAO,CACX,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CACjC,MAAM,CAAC,YAAa,CAAC,KAAK,EAC1B,MAAM,CAAC,WAAW,IAAI,EAAE,EACxB,GAAG,OAAO,CACX,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAC1D,MAAM,CAAC,YAAa,EACpB,EAAE,EACF,GAAG,OAAO,CACX,CAAC;QACF,MAAM,CAAC,YAAa,CAAC,YAAY,GAAG,aAAa,CAAC;QAElD,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAChE,gBAAgB,EAChB,MAAM,CAAC,YAAa,CAAC,KAAK,EAC1B,kBAAkB,EAClB,GAAG,OAAO,CACX,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CACtC,iBAAiB,MAAM,CAAC,YAAa,CAAC,KAAK,YAAY,mBAAmB,QAAQ,EAClF,iBAAiB,MAAM,CAAC,YAAa,CAAC,KAAK,UAAU,aAAa,0BAA0B,mBAAmB,EAAE,EACjH,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,EAC/C,gBAAgB,EAChB,GAAG,OAAO,CACX,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CACtD,MAAM,EACN,SAAS,EACT,GAAG,OAAO,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QAEtC,MAAM,IAAI,CAAC,8BAA8B,CAAC,MAAM,CAAC,YAAa,EAAE,GAAG,OAAO,CAAC,CAAC;QAE5E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,mBAAwC,EACxC,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,CACtD,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CACxC,mBAAmB,EACnB,SAAS,EACT,GAAG,OAAO,CACX,CAAC;QACF,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,uBAAuB,CAAC,sBAAsB,CACvD,mBAAmB,EACnB,SAAS,EACT,GAAG,OAAO,CACX,CAAC;YACF,MAAM,IAAI,CAAC,uBAAuB,CAAC,6BAA6B,CAC9D,mBAAmB,EACnB,SAAS,EACT,GAAG,OAAO,CACX,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,SAAiB,EACjB,GAAG,IAA6B;QAEhC,MAAM,EAAE,OAAO,EAAE,GAAG,CAClB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,CACpD,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,gBAAgB,CAAC,MAA2B;QAClD,OAAO,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,kBAAkB,EAAE,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;aAClE,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAC1C,YAA0B,EAC1B,GAAG,IAAyB;QAE5B,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAC5D,YAAY,EACZ,GAAG,IAAI,CACR,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YACzC,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,iBAAiB,YAAY,CAAC,KAAK,gBAAgB;YACrG,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,gBAAgB,EAAE;aAC5C;YACD,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;QACH,MAAM,YAAY,GAChB,IAAI,CAAC,iBAAiB,CAUpB,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;QACxE,MAAM,iBAAiB,GAAG,UAAU,EAAE,eAAe,EAAE,IAAI,CACzD,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAC3C,CAAC;QACF,IAAI,CAAC,UAAU,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAChE,CAAC;QACD,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC;QACpD,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,iBAAiB,YAAY,CAAC,KAAK,kBAAkB,UAAU,CAAC,EAAE,4BAA4B,iBAAiB,CAAC,EAAE,EAAE;YACtK,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC;YACvC,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,gBAAgB,EAAE;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAI,IAAa;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF,CAAA;AA3WY,eAAe;IAD3B,WAAW,CAAC,yFAAyF,CAAC;;GAC1F,eAAe,CA2W3B"}